Adding the Virtual System Administrator (VSA) for Single Sign On

To add the Virtual System Administrator (VSA) application from the Single Sign On catalog follow these steps.

Log into your On-Demand tenant

Select Directory Manager.

Select Groups.Select the green plus sign in the bottom right corner.Name the Group VSA Users.Select ADD GROUP.

Select SSO Manager.

Select the green plus sign in the bottom right corner.

Select Kaseya

This will allow you to begin to configure the Application.

Select Application is Enabled

Select Protocol SetupNote: You will need to update the following to reflect your public Kaseya web address. If your VSA server supports an HTTPS connection, please enter the the URLs reflect that to ensure there is secure communication and encryption in place.Assertion Consumer Service URLService Entity ID (Issuer)

Select Advanced Settings

Under Signing Algorithm.

Select SHA-1.

Select Attribute Transformation.

Select Add Custom Attribute Map.

Add the following attributes.Attribute Value: {User.PrincipleName}Issue As type: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier

Note: You will need this certificate to complete the module configuration within VSA.

Next you will need give the user access to the VSA Users group. This will allow the users to see the Kaseya VSA App in the Launchpad.Select Directory Manager.

Select Groups.

Select the VSA Users group.

Select Add iconSelect the users you wish to add to the group. Select ADD USERS.

Configure AuthAnvil Module within Virtual System Administrator (VSA)

Log into Virtual System Administrator (VSA).

Select AuthAnvil.

Select Configure Kaseya Logon.

Under Kaseya Single Sign On Configuration

Select enable Single Sign On to Kaseya.Update the Reply to URL: https://(YourKaseyaServer)/vsapres/web20/core/ssologin.aspxNote: Replace (YourKaseyaServer) with the fully qualified domain name of your Virtual System Administrator (VSA) Server.Upload the certificate previously downloaded from the AuthAnvil Server.

Select Save Settings.

You should now be able to log into Virtual System Administrator (VSA) via the tenant launchpad.